
cfn_nag
Linting tool for CloudFormation templates

Linting tool for CloudFormation templates

Automated scanner that hunts for secrets (API keys, credentials) accidentally uploaded to public S3 buckets, using truffleHog3 for detection and…

Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.

We would like to request that all contributors please clone a *fresh copy* of this repository since the September 21st maintenance.

OpenClarity is an open source platform built to enhance security and observability of cloud native applications and infrastructure

A multi-platform CI/CD vulnerability detection and attack automation tool for identifying security weaknesses in pipeline configurations.

Read-only Azure DevOps enumeration tool that queries the REST API to surface projects, repositories, service connections, builds, pipeline secrets,…

ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring supporting…

Identify hardcoded secrets in static structured text

A lightweight, cross-platform CLI tool that scans your filesystem to detect exposed secrets, API keys, and tokens. Built with Go for maximum…

Security scanner for MCP servers. Grades auth, permissions, injection risks, and tool safety. The Lighthouse of agent security.